norris%netscape.com
51842ef45e
Fix 18553 [DOGFOOD] addEventListener allows sniffing keystrokes
...
Add checks to nsScriptSecurityManager::CheckCanListenTo that take
a principal and ensure that the currently executing script code
either is from the same origin as that principal or has the
UniversalBrowserRead privilege enabled. (chrome code has all
privileges enabled by default.) It's okay for the principal passed in
to be null. That just signifies a privileged window/document that only
can be listened to with privileges.
I added GetPrincipal/SetPrincipal methods to nsIEventListenerManager.
nsDocument::GetNewListenerManager sets a principal on the listener
manager when it creates one. Obviously there are other places that
create listener managers, but scripts seem to go through this one.
Another change is to save some memory usage. Currently I allocate an
array of PolicyType that is NS_DOM_PROP_MAX elements long.
Unfortunately, compilers appear to allocate four bytes for each
PolicyType, so the array takes around 2400 bytes. I've added changes
to use two bit vectors that should consume about 1/16 that space.
r=joki
There are also changes that push nsnull onto the JSContext stack when
entering a nested event loop.
r=jband
1999-11-25 05:28:18 +00:00
norris%netscape.com
24778bda71
Modify generated dom code to use a enum rather than a string for codesize
...
and efficiency.
Tighten checks on document properties and node properties. Should resolve
several bugs:
18965 document.firstChild vulnerability
19043 document.childNodes vulnerability
19044 document.lastChild vulnerability
r=mstoltz
1999-11-20 07:28:34 +00:00
waterson%netscape.com
c38842c56b
Fix event listener leak in code that is generated to take functions. Fix to generate new NPL 1.1 license. r=joki
1999-11-18 20:38:43 +00:00
dmose%mozilla.org
5312eacf8c
updated license boilerplate to xPL 1.1, a=chofmann@netscape.com,r=endico@mozilla.org
1999-11-06 03:40:37 +00:00
vidur%netscape.com
395670b5ed
global object no longer has an unused constructor.
1999-09-23 23:52:09 +00:00
briano%netscape.com
1d66d27e7a
General cleanup.
1999-09-11 00:59:11 +00:00
sfraser%netscape.com
7ea22097c2
Remove the base DLL
1999-09-10 00:52:24 +00:00
slamm%netscape.com
735d033b94
Fix build warnings.
1999-09-09 19:16:12 +00:00
vidur%netscape.com
cb561f35bc
Added JS exceptions to DOM glue. Added implementation for nsIDOMDOMException. Added nsIScriptContextOwner::ReportScriptError.
1999-09-08 23:14:30 +00:00
cyeh%netscape.com
34cd2ddae1
Remove IGNORE_MANIFEST=1. It doesn't do anything and it confuses people.
1999-09-01 01:13:14 +00:00
kipp%netscape.com
7b70f78268
Make it build on linux at least
1999-09-01 00:54:53 +00:00
joki%netscape.com
155255be20
Adding new flag to the security check calls out of the DOM generated JS files.
1999-08-31 14:23:55 +00:00
vidur%netscape.com
379ded57ab
jsval can now be a parameter or return type. Got rid of unused variable warnings. Fixed secMan leak.
1999-08-27 06:06:24 +00:00
ramiro%netscape.com
2c19866af3
cleanup linking of libmozreg.
1999-08-21 15:41:53 +00:00
brendan%mozilla.org
6ae1ed6087
- Avoid generating "if (argc >= 0)" dead code and incurring warnings on some
...
platforms. Those warnings were degrading slamm's tinderbox warning page's
S/N ratio.
- Use const char arrays initialized by string constants, rather than const
pointers to unnamed arrays created by string constants.
- Chop out some extra leading newlines that sometimes tripled up when emitted
after a double trailing newline.
1999-08-10 06:59:03 +00:00
vidur%netscape.com
ff5ce3e079
Changed attribute getter glue to use NS_SUCCESS macro instead of comparing to NS_OK
1999-08-09 19:19:49 +00:00
vidur%netscape.com
5104a33513
Relative URLs specified for window.location.href are now resolved relative to the calling location.
1999-08-03 23:16:48 +00:00
briano%netscape.com
007ea62765
Cleaned it up and changed the name of libreg.{a,so} to libmozreg.{a,so} to fix the conflict reported in bug 8568.
1999-07-27 23:27:44 +00:00
waterson%netscape.com
911c81f859
Fix missing cast in XPC case.
1999-07-22 21:57:29 +00:00
slamm%netscape.com
19579def51
Remove unused variable (and compiler warning)
1999-07-06 23:38:33 +00:00
dveditz%netscape.com
17864a291d
Trying to fix Win32 dependencies. Lots of broken cut-n-paste makefiles
1999-07-02 11:50:19 +00:00
mcafee%netscape.com
e140d3c2d3
BeOS changes
1999-06-27 09:34:52 +00:00
mcafee%netscape.com
9004f2c1df
BeOS changes
1999-06-27 09:28:16 +00:00
pollmann%netscape.com
e335d3d54f
Bug 2195: Make select[n] == select.options[n] (idlc bugfix courtesy of Vidur)
1999-06-15 23:41:30 +00:00
vidur%netscape.com
de45c1e44d
Changed reference counting rules for nsGlobalWindow - now its JSObject maintains a reference to it. The root for the global JSObject is now removed in SetWebShell when we're going away. Lots of null checks so that standalone global window doesn't crash.
1999-06-15 03:17:11 +00:00
vidur%netscape.com
51f68b19fb
JS_GetPrivate calls now go through a nsJSUtils wrapper that checks up the prototype chain. This is useful for applets where the JSClass instance is set as the proto of the LiveConnect-generated object.
1999-06-11 22:38:35 +00:00
vidur%netscape.com
f51c4ade16
Fixes for bug 927. JS timer code can deal with the window closing in a timer callback. NamedItem gets called for unknown integer property values as well. Added nsCOMPtr generation option to idlc. Fixed warnings in generated code.
1999-06-11 21:49:41 +00:00
mang%subcarrier.org
872ca0acf2
documented existence of -g flag
1999-05-28 01:25:31 +00:00
vidur%netscape.com
20cf0c3a50
Added support for noscript qualifier to attributes and methods. When this qualifier is used, the corresponding attribute or method is not reflected in the glue.
1999-05-28 00:17:38 +00:00
joki%netscape.com
0faca774dd
Beginnings of JavaScript security bits.
1999-05-26 21:43:28 +00:00
dp%netscape.com
94344009c8
Landing xpcom20/21 branch.
1999-05-26 01:38:36 +00:00
mccabe%netscape.com
e880402830
Support for magically detecting whether an argument to an XPConnect'ed function is a dom node with a native nsISupports, and unwrapping it properly.
...
This'll go live as soon as I can persuade joki or vidur to rebuild the DOM stubs.
1999-05-12 02:05:48 +00:00
law%netscape.com
f07d111666
Tweaking initializer code so it still works with appcores
1999-05-07 19:37:21 +00:00
vidur%netscape.com
5a0ff8598d
Added use of the nsIJSNativeInitializer interface in constructors. Work in progress for unknown keyword.
1999-05-04 20:48:50 +00:00
waterson%netscape.com
0e6d8ebdba
Bug 5679. Fix leak from XPConnect glue.
1999-05-04 03:32:12 +00:00
waterson%netscape.com
a37bdc108b
Fixed a problems with XPIDL parameters and return values ('out' params are stills broken). Got rid of the XPIDL_JS_STUBS defines, as they are obsolete.
1999-04-27 06:14:08 +00:00
waterson%netscape.com
e00ff30ebf
Modified JSStubGen to spit out correct code from XPConnect.
1999-04-24 02:38:05 +00:00
waterson%netscape.com
5358fd04f6
Bug 5182. Use whitespace instead of ## in NS_FORWARD macros. a=vidur.
1999-04-16 18:08:20 +00:00
joki%netscape.com
631f28bc50
New DOM2 event api's.
1999-03-28 22:19:42 +00:00
alecf%netscape.com
ad1fe78a92
ignore generated files
1999-03-12 19:34:47 +00:00
waterson%netscape.com
21ed358df2
Must've missed this file in my merge: support for xpidl keyword.
1999-03-10 20:15:23 +00:00
waterson%netscape.com
1b5252cb80
Support for xpidl keyword.
1999-03-10 19:55:00 +00:00
vidur%netscape.com
634e324575
Added CreateElementWithNameSpace to proprietary document interface. Fixed GetTagName for HTML to uppercase tag names. Hooked up style rule addition and deletion to reconstruct frames. Fixed DOM generation problem
1999-03-10 01:17:49 +00:00
warren%netscape.com
4b2d56fbaa
nsRepository -> nsIComponentManager changes.
1999-03-09 09:44:27 +00:00
sfraser%netscape.com
b889fbf94d
Changes to get DOM IDL compiler to build on Mac.
1999-03-06 00:33:35 +00:00
sfraser%netscape.com
c29268e9ca
First Checked In.
1999-03-06 00:28:40 +00:00
scc%netscape.com
2ec0a397ea
rename |IID()| --> |GetIID()|
1999-03-03 19:48:57 +00:00
ramiro%netscape.com
60a05869de
Unhardcode nspr libs.
1999-03-03 13:35:52 +00:00
waterson%netscape.com
0ad841ff91
Made NS_InitFooClass() accessable outside of JSDOM.DLL.
1999-02-17 08:32:14 +00:00
alecf%netscape.com
f030b889ad
use built-in rules to build idlc compiler
1999-02-12 01:21:31 +00:00
